Signing in with Google

Clment has Google sign-in built in. It uses Clment’s own Google sign-in client, so there’s nothing to create in Google Cloud Console and nothing to send us — no client IDs, no secrets, no support ticket. It works with Google Workspace accounts and with personal Google accounts.

Connecting a Google account

Each person connects their own Google account, in whichever way fits:

• New to Clment — on the sign-up page choose Google, then Continue with Google. This creates your Clment account.
• Accepting an invitation — choose Continue with Google on the invitation page. The Google account’s email must be the address the invitation was sent to.
• Already have a Clment account — sign in as usual, open Settings → Security, and choose Connect on the Google row. If the Google account uses the same email as your Clment account, it’s connected straight away. If it uses a different one, we email your Clment address a link to confirm it’s yours — open it while signed in to Clment and choose Connect.

From then on, Google on the sign-in page takes you straight in.

Making Google your organisation’s sign-in method

Admins set this on Settings → Security, in the Sign-in methods card — no help from us needed:

• Require for org on the Google row — everyone in the organisation must sign in with Google. Email and password, and Microsoft, are refused.
• Disable for organization on the Email and password row — turns password sign-in off for the organisation but still accepts both Google and Microsoft. (If you sign in with SSO only and have no password, the button is Disable password for organization.)

Before you switch, make sure everyone can get in with Google. A member who hasn’t connected Google yet is connected automatically the first time they choose Google at sign-in — provided their Google account’s verified email exactly matches their Clment email. Anyone whose Google email is different should Connect Google from Settings → Security first.

Clment’s own two-step verification applies to password sign-in only. When someone signs in with Google, their Google account’s 2-Step Verification (and your Workspace policies) do that job instead.

Optional controls in Google Workspace

Clment asks Google only for sign-in and basic profile information — openid, email and profile (name, email address and photo). None of the following is required, but Workspace administrators can:

• Allow, limit or block Clment. In the Google Admin console → Security → Access and data control → API controls → Manage third-party app access, find Clment (it’s listed once someone in your organisation has signed in with it) and set its access — for example Trusted, Limited or Blocked — for the whole organisation or for specific organisational units.
• Enforce 2-Step Verification for your users in the Admin console; it then applies whenever they sign in to Clment with Google.

Who can get into your organisation

Signing in with Google proves who someone is — it doesn’t give them access to your organisation. Your members are the people you invite from Settings → Team (see Inviting users and roles), plus whoever created the organisation. To end someone’s access, remove them on the Team page. Once password sign-in is off for your organisation, suspending their Google account also stops them signing in again.

Troubleshooting

• “Your Google account isn’t linked to your Clment account yet” — sign in the way you usually do (email and password, or Microsoft), then Connect Google from Settings → Security.
• The Google email doesn’t match — an invitation needs the Google account that uses the invited address; check which account you chose (the account picker lets you switch). Connecting from Settings → Security works with a different email — look for our confirmation email.
• Blocked by your organisation — your Workspace administrator has restricted third-party access to Clment (see above).
• “Google sign-in isn’t allowed for that organization” — an admin has required a different sign-in method. Use one of the methods shown.

See also

• Security and SSO
• Signing in with Microsoft (Entra ID)
• MFA and account protection